CVE-2025-13485: itsourcecode Online File Management System ajax.php sql injection
A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13485?
CVE-2025-13485 has a high severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2025-13485?
To fix CVE-2025-13485, validate and sanitize user inputs, particularly the Username parameter in the login function.
What systems are affected by CVE-2025-13485?
CVE-2025-13485 affects itsourcecode Online File Management System version 1.0.
Can CVE-2025-13485 be exploited remotely?
Yes, CVE-2025-13485 can be exploited remotely, allowing attackers to perform SQL injection attacks.
What impact does CVE-2025-13485 have on data security?
CVE-2025-13485 can lead to unauthorized access to the database, compromising sensitive data.